Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa
File:                     3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa (raw, json)
Hash identifier:          xbYrsIOwMUgTYqD3qc2xmIJ5NmkVe0zus1MNTSQvBSE=
Subject key identifier:   85:69:F7:02:F4:47:5A:E0:E4:BE:F5:BB:AC:DB:99:14:01:91:42:50
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       45C5FC18D60F26A22265B0A65F34A0363A4D7ABF
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa
Signing time:             Thu 04 Apr 2024 14:22:10 +0000
ROA not before:           Thu 04 Apr 2024 14:17:10 +0000
ROA not after:            Thu 03 Apr 2025 14:22:10 +0000
asID:                     271466
IP address blocks:        201.49.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:fc:18:d6:0f:26:a2:22:65:b0:a6:5f:34:a0:36:3a:4d:7a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Apr  4 14:17:10 2024 GMT
            Not After : Apr  3 14:22:10 2025 GMT
        Subject: CN=8569F702F4475AE0E4BEF5BBACDB991401914250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:e5:ad:60:ff:67:63:6a:80:01:0c:af:00:
                    be:d0:27:bf:50:c5:5f:04:0f:a4:a8:58:19:47:de:
                    4f:b0:6c:0a:84:d8:09:e8:55:ca:a3:9f:8c:e8:80:
                    2b:b2:b2:60:d8:44:24:c3:be:52:1f:2c:50:59:3c:
                    f2:81:08:6e:a2:cb:f5:45:61:63:47:39:42:39:4c:
                    bc:7c:1e:e2:98:c7:c3:b9:f5:03:58:8b:51:b7:66:
                    33:e5:ba:f1:54:4b:c6:f2:20:b6:83:63:e8:18:4c:
                    0c:32:c4:f6:5d:54:4f:d2:93:6f:f6:36:8e:0d:f6:
                    8e:71:56:70:a6:0a:28:80:82:32:85:3d:14:c3:b0:
                    c4:8c:4f:dc:56:31:54:53:70:a3:11:7a:54:31:38:
                    86:4b:0c:d5:da:e2:ad:f5:6e:65:a6:32:4c:16:45:
                    4e:de:2d:cc:4c:3b:3e:86:7f:ec:7d:31:c6:6a:31:
                    fa:46:7f:5d:54:cc:39:16:ef:ea:cd:3f:73:04:d1:
                    48:7a:fc:ce:35:32:f5:0e:f5:cf:dd:c9:c3:2a:d2:
                    34:dc:77:77:2b:57:09:2e:2d:9b:43:38:15:bc:5f:
                    65:1c:7c:31:f4:5f:0d:4b:ea:a3:35:12:2e:3c:ea:
                    70:7f:6f:af:2d:39:ac:f9:94:39:98:de:ef:b2:23:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:69:F7:02:F4:47:5A:E0:E4:BE:F5:BB:AC:DB:99:14:01:91:42:50
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:09:56:54:a6:16:8f:c5:ad:cc:b6:bd:80:5f:6e:fd:90:12:
         50:8e:4e:15:f4:d6:48:d2:7f:4d:7c:f2:e8:05:5a:18:ee:bc:
         ac:3f:26:d7:20:ca:9b:4e:fb:f1:d8:10:62:35:bc:01:94:80:
         bc:4d:25:29:73:e1:f9:2b:00:55:4c:be:22:ff:df:c1:ba:3a:
         e1:6d:d5:0a:53:71:2d:e9:79:f3:98:78:a5:84:06:5a:91:40:
         8a:b3:d8:8b:36:43:8b:78:ae:6b:a4:5e:7a:aa:3c:c0:cf:47:
         28:d8:43:a0:d2:06:70:92:d3:0b:db:f5:5f:b8:3b:fa:4c:f0:
         85:46:03:2d:5d:ac:e9:a2:28:b6:95:6c:be:16:48:8a:f6:f6:
         89:14:8f:39:f9:01:de:b0:f9:de:f5:21:1a:5b:53:72:5f:8f:
         06:a7:0a:33:ed:9d:e0:0a:25:b1:23:75:5a:dc:ef:17:92:ae:
         c7:a9:a5:0f:58:a5:8e:7d:1c:4e:a0:6b:3c:89:44:c5:c3:27:
         48:c3:35:a2:5b:e9:c6:c9:af:96:30:b8:cb:0e:be:10:38:db:
         5a:32:31:83:bb:44:be:0d:f9:f6:0d:8f:19:be:be:94:29:36:
         99:b0:d0:25:67:23:d2:26:00:b7:03:07:a5:a9:fd:4c:72:db:
         a7:cd:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org